<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="updates@fedoraproject.org" status="testing" type="security" version="2.0">
    <id>FEDORA-MODULAR-2024-deafa21e1d</id>
    <title>nginx-mainline-3820240218193500.f38</title>
    <issued date="2024-02-27 02:07:15"/>
    <updated date="2024-02-27 02:07:15"/>
    <rights>Copyright (C) 2024 Red Hat, Inc. and others.</rights>
    <release>Fedora 38 Modular</release>
    <severity>Important</severity>
    <summary>nginx-mainline-3820240218193500.f38 security update</summary>
    <description>Contains fixes for [vulnerabilities in HTTP/3](http://nginx.org/en/security_advisories.html) (CVE-2024-24989, CVE-2024-24990).</description>
    <references>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2232217" id="2232217" type="bugzilla" title="nginx-1.25.4 is available"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2264297" id="2264297" type="bugzilla" title="TRIAGE CVE-2024-24989 nginx:mainline/nginx: NULL pointer dereference in HTTP/3 [fedora-all]"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2264303" id="2264303" type="bugzilla" title="TRIAGE CVE-2024-24990 nginx:mainline/nginx: Use-after-free in HTTP/3 [fedora-all]"/>
    </references>
    <pkglist>
      <collection short="F38M">
        <name>Fedora 38 Modular</name>
      </collection>
    </pkglist>
  </update>
</updates>
